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Attorney Docket No. 051508/0103 

In re patent application of 
Akira SUGIYAMA 
Serial No. Unassigned 
Filed: November 17, 1998 

For: UNIQUE TIME GENERATING DEVICE AND AUTHENTICATING 

DEVICE USING THE SAME 

PRELIMINARY AMENDMENT 

Assistant Commissioner for Patents 
Washington, D.C. 2 0231 

Sir: 

Prior to examination of the above -identified 
application. Applicant respectfully requests that the 
following amendments be entered into the application: 

IN THE CLAIMS : 

Please amend the claims as follows : 
Claim 6, delete "or 4". 
Claim 7, delete "or 4". 

Claim 8, line 2, delete "any one of the preceding 
claims", and insert --claim 1--. 

Claim 9, line 2, delete "any one of claims 1 to 
7", and insert --claim 1--. 

Claim 10, line 2, delete "any one of claims 1 to 
7", and insert --claim 1--. 
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Claim 11, lines 3 and 4, delete "any one of claims 
1 to 7", and insert --claim 1--. 

Claim 14, line 2, delete "any one of claims 1 to 
7", and insert --claim 1--. 

Claim 15, line 2, delete "any one of claims 1 to 
7", and insert --claim 1--. 

Claim 16, line 2, delete "any one of claims 1 to 
7", and insert --claim 1--. 

Claim 17, line 2, delete "any one of claims 1 to 
7", and insert --claim 1--. 

Claim 32, delete "or 31". 



Please rewrite the following claims: 

3 6 . (Amended) An authentication-data issuing 
system as recited in [any one of claims 14 to 17] claim 14 
wherein the unique authentication data created and issued 
by said subservient computer contains the unique 
authentication data updated by [said] renewal means 
[recited in claim 34] . 

38. (Amended) An authentication-data issuing 
system as recited in claim 3 7 wherein the recording media 
having stored thereon updated unique authentication data 
is [the] a ticket [recited in claim 18] , a prepaid card 

[recited in claim 19] , an electronic money [recited in 
claim 20] , an ID card [recited in claim 21] , or a card 

[recited in claim 22] , and wherein the subservient 

- 2 - 
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computer that stores the updated unique authentication 
data on said recording media is contained in or attached 
to an automatic ticket checker or a card reader/writer for 
[a] the prepaid card, the ID card or the electronic money. 

REMARKS 

Entry of the foregoing amendments prior to 
examination is respectfully requested. 

Applicant respectfully requests that the foregoing 
amendments to Claims 6-11, 14-17, 32, 36, and 38 be 
entered in order to avoid this application incurring a 
surcharge for the presence of one or more multiple 
dependent claims . 

Respectfully submitted, 

November 23, 1998 

Arthur Schwartz 
Reg. No. 22,115 



FOLEY & LARDNER 
3000 K Street, N.W. 
Suite 500 

Washington, D.C. 20007-5109 
Tel: (202) 672-5300 



DESCRIPTION 



AUTHENTICATION-DATA ISSUING SYSTEM BASED ON UNIQUE TIME, 
RECORDING MEDIA FOR STORING AUTHENTICATION DATA 
ISSUED BY THE AUTHENTICATION-DATA ISSUING SYSTEM AND 
AUTHENTICATION DATA VERIFYING SYSTEM 

TECHNICAL FIELD 
The present invention relates to an authentication 
data issuing system based on unique time generation, a 
recording media for storing authentication data issued by 
the authentication -data issuing system and an 
authentication data verifying system, which exercise 
general control of information issued by particular 
computers, verify authentication data issued by some of 
the computers and thereby effectively avoid damages that 
would be caused by any person stealing the authentication 
data. 

BACKGROUND ART 
Today, various prepaid cards, each prestoring money 
amount information corresponding to a certain amount of 
money paid in advance, are being widely used in various 
commercial transactions, such as for using railroad 
facilities and public telephones and playing with 
Japanese pinball (hereinafter "pachinko") game machines. 
These prepaid cards are inserted into card reader /writers 
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attached to or contained in various pieces of equipment , 
such as automatic ticket checkers, automatic ticket 
vending machines, public telephones and game machines, 
where each amount due is subtracted from the remaining 
5 balance on the card and the prestored money amount 
information is rewritten accordingly. 

Besides, in various banking agencies and the like, 
account transfer services using personal computers and 
public telephone lines have come into wide use, and it 

10 is expected that every banking and currency settlement 

service will be conducted through an electronic currency 
system in the near future (as disclosed in, for example, 
Japanese Patent Publication No. HEI-7-11723) . 

Recently, an increasing number of persons have 

15 been attempting to tamper or copy the stored data on the 
prepaid cards without due authorization, so that prepaid 
card issuing companies are exercising, against such 
fraudulent attempts, preventive measures that include 
encryption and scrambling of the stored data. In the 

20 account transfer and various electronic business 

transactions, many persons have been attempting to 
acquire other person's authentication data in a 
fraudulent manner, in order to make unfair benefits by 
pretending to be the true prepaid card holder. 



DISCLOSURE OF THE INVENTION 
The present invention has been made in view of 
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such inconveniences encountered by prior techniques and 
seeks to provide an improved technique which, using a 
unique time generating device previously proposed by the 
applicant of the present application (in PCT/ JP/02433 ) , 
5 can effectively avoid damages that would be caused by 
any person stealing authentication data. 

In order to accomplish the above-mentioned object, 
the present invention provides an authentication-data 

10 issuing system based on unique time, the authentication- 
data issuing system including a plurality of computers 
connected with each other via communication lines with 
one of the computers set to function as a master 
computer, the master computer comprising: a unique time 

15 generating device including time keeping means for 

sequentially outputting unit time values at predetermined 
intervals over a preset time -measuring period that begins 
at a given start point on a selected date and terminates 
at a given future end point and accumulating means for 

20 sequentially accumulating the unit time values output by 
the time keeping means so as to constantly measure a 
changing elapsed time within the time -measuring period; 
transmitter means for, during communication between the 
master computer and another of the computers subservient 

25 to the master computer, transmitting, from the master 

computer to the subservient computer, authentication data 
based on an elapsed time measurement , corresponding to a 
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given time point, indicated by the unique time generating 
device; and register means for receiving and registering 
an issuance history of unique authentication data created 
and issued by the subservient computer imparting 
5 additional data, unique to the subservient computer, to 
the authentication data transmitted by the master 
computer . 

According to another aspect of the present 
invention, there is provided an authentication-data 

10 issuing system based on unique time, the authentication- 
data issuing system including a plurality of computers 
connected with each other via communication lines with 
one of the computers set to function as a master 
computer, the master computer including a unique time 

15 generating device including time keeping means for 

sequentially outputting unit time values at predetermined 
intervals over a preset time-measuring period that begins 
at a given start point on a selected date and terminates 
at a given future end point and accumulating means for 

20 sequentially accumulating the unit time values output by 
the time keeping means so as to constantly measure a 
changing elapsed time within the time -measuring period. 
Each of the computers subservient to the master computer 
comprises: receiver means for, during communication with 

25 the master computer, receiving authentication data based 
on an elapsed time measurement, corresponding to a given 
time point, indicated by the unique time generating 
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devlce of the master computer; issuer means for creating 
and issuing unique authentication data by imparting 
additional data, unique to the subservient computer, to 
the authentication data received via the receiver means 
5 from the master computer; and transmitter means for 

transmitting, to the master computer, an issuance history 
of the unique authentication data created and issued by 
the issuer means. 

According to still another aspect of the present 

10 invention, there is provided an authentication- data 

issuing system based on unique time, the authentication- 
data issuing system including a plurality of computers 
connected with each other via communication lines with 
one of the computers set to function as a master 

15 computer, where each of the computers subservient to the 
master computer comprises: a unique time generating 
device including time keeping means for sequentially 
outputting unit time values at predetermined intervals 
over a preset time -measuring period unique to the 

20 computer that begins at a given start point on a 

selected date and terminates at a given future end point 
and accumulating means for sequentially accumulating the 
unit time values output by the time keeping means so as 
to constantly measure a changing elapsed time within the 

25 time -measuring period; issuer means for creating and 
issuing unique authentication data, peculiar to the 
subservient computer, on the basis of an elapsed time 
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measurement indicated by the unique time generating 
device; and transmitter means for transmitting, to the 
master computer, an issuance history of the unique 
authentication data created and issued by the issuer 
5 means . 

According to still another aspect of the present 
invention, there is provided an authentication-data 
issuing system based on unique time, the authentication- 
data issuing system including a plurality of computers 

10 connected with each other via communication lines with 
one of the computers set to function as a master 
computer- Each of the computers subservient to the 
master computer comprises a unique time generating device 
including time keeping means for sequentially outputting 

15 unit time values at predetermined intervals over a preset 
time -measuring period unique to the computer that begins 
at a given start point on a selected date and terminates 
at a given future end point and accumulating means for 
sequentially accumulating the unit time values output by 

20 the time keeping means so as to constantly measure a 

changing elapsed time within the time -measuring period. 
The master computer, exercising general control of the 
subservient computers , includes register means for 
receiving and registering an issuance history of data 

25 created and issued by each of the subservient computers 
on the basis of an elapsed time measurement indicated by 
the unique time generating device of the subservient 
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computer . 

According to still another aspect of the present 
invention, there is provided a recording media having 
stored thereon unique authentication data created by any 
5 one of the subservient computers, and the recording media 
is issued by the subservient computer. 

According to still another aspect of the present 
invention, there is provided an authentication-data 
verifying system including a plurality of computers 

10 connected with each other via communication lines with 
one of the computers set to function as a master 
computer. Each of the computers subservient to the 
master computer comprises : reading means for reading 
unique authentication data issued by any one of the 

15 subservient computers on the basis of information 

received from another of the subservient computers, or 
reading unique authentication data issued by any one of 
the subservient computers and recorded on a recording 
media; transmitter means for transmitting the unique 

20 authentication data read by the reading means to the 
master computer for subsequent collation thereby; and 
receiver means for receiving from the master computer a 
result of collation between an issuance history of the 
unique authentication data by each of the subservient 

25 computers registered in the master computer and the 

unique authentication data transmitted by the transmitter 
means . 
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According to still another aspect of the present 
Invention, there is provided an authentication-data 
verifying system including a plurality of computers 
connected with each other via communication lines with 
5 one of the computers set to function as a master 

computer, where the master computer comprises: receiver 
means for receiving unique authentication data 
transmitted by transmitter means of any one of the 
computers subservient to the master computer, the unique 

10 authentication data being issued by the subservient 

computer and read by reading means of the subservient 
computer; and collator means for collating between the 
unique authentication data received by the receiver means 
and an issuance history of the unique authentication data 

15 by each of the subservient computers that is registered 
in the master computer; and transmitter means for 
transmitting a result of collation by the collator means 
to receiver means of the subservient computer. 

20 DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a network diagram illustrating an 
authentication-data issuing system, according to a best 
mode of carrying out the present invention, for issuing 
prepaid cards to be used for pachinko game machines; 

25 Fig. 2 is a block diagram illustrating a general 

setup of a unique time generating device employed in the 
authentication- data issuing system of Fig. 1; 
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Fig. 3 is a diagram explanatory of a manner in 
which an elapsed time is measured in accordance with the 
best mode of the present invention; 

Fig. 4 is a diagram showing examples of different 
5 time -measuring periods assigned to a plurality of unique 
time generating devices provided in a plurality of 
computers ; 

Fig. 5 is a diagram showing other examples of 
different time-measuring periods assigned to other unique 
10 time generating devices; 

Fig. 6 is a block diagram illustrating a general 
organization of a master computer shown in Fig. 1; 

Fig. 7 is a diagram illustrating contents of 
authentication data transmitted from the master computer 
15 of Fig. 1; 

Fig. 8 is a block diagram illustrating a general 
organization of a card distributor's computer of Fig. 1; 

Fig. 9 is a diagram illustrating contents of 
authentication data issued from a card distributor's 
20 computer to a pachinko house of Fig. 1; 

Fig. 10 is a diagram illustrating a processing 
flow for creating unique authentication data; 

Fig. 11 is a block diagram illustrating a general 
organization of a pachinko game machine shown in Fig. 1; 
25 Fig. 12 is a diagram illustrating a processing 

flow for creating unique -authentication- data updating; 

Fig. 13 is a diagram illustrating contents of 
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Information presented on a display means when a card is 
used with updated data; 

Fig. 14 is a diagram illustrating a hierarchical 
network of an authentication-data issuing system 
5 according to Example 1 installed within a company; 

Fig. 15 is a block diagram illustrating a general 
organization of a master computer shown in Fig. 14; 

Fig. 16 is a block diagram illustrating a general 
organization of a lower- level computer subservient to the 
10 master computer shown in Fig. 14; 

Fig. 17 is a diagram illustrating a hierarchical 
network of an authentication-data issuing system 
according to Example 2 ; 

Fig. 18 is a diagram illustrating a hierarchical 
15 network of an authentication-data issuing system 
according to Example 3 ; 

Fig. 19 is a diagram illustrating a hierarchical 
network of an authentication-data issuing system 
according to Example 4; and 
20 Fig. 20 is a diagram illustrating a hierarchical 

network of an authentication-data issuing system 
according to Example 5 . 



BEST MODE FOR CARRYING OUT THE INVENTION 
25 In PCT Patent Application No. PCT/JP/02433 filed 

at an earlier date, the applicant of the present 
application proposed a unique time generating device and 
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fully explained the concept of "unique time" generated by 
the device. Unlike the today's commonly-used time 
concept based on Greenwich Mean Time, the "unique time" 
is a time concept to linearly count a preset finite time 
5 period from the zeroth toward the last second thereof, 
i.e. , to constantly a measure changing elapsed time 
toward the last second within the preset time -measuring 
period. 

On the basis of such a unique time concept, the 
10 present invention provides for authentication of a given 
computer on a communication network or authentication of 
a recording media storing thereon authentication data 
issued by a given computer on the communication network. 
First, the present invention will be described 
15 hereinbelow in relation to a system for issuing and 

authenticating prepaid cards for use in Japanese pinball, 
i.e., "pachinko", game machines equipped with card 
readers (commonly known as CR-type pachinko game 
machines ) . 

20 In Fig. 1, reference numeral 1 represents a 

highest -level master computer of an original card issuer 
company that issues prepaid cards (prepaid pachinko 
cards), to which are connected, via network lines, 
subservient second-level computers 2A, 2B, 2C, 2n of 

25 card distributor companies. Further, to the second-level 
computers 2A, 2B, 2C, 2n of the card distributor 

companies are connected host computers (such as those 
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denoted at 3A, 3B, 3n) of affiliated pachinko 

houses. In each of the pachinko houses, the host 
computer (such as 3A) collectively manages or exercising 
general control of individual pachinko (CR-type) pachinko 
game machines 4 and prepaid card vending machines 5 
located within the house. In addition, in each of the 
pachinko houses, third-level computers are provided 
within or connected with the host computer (such as 3A) . 

The above-mentioned highest -level master computer 1 
implements a unique time generating device 6 as shown in 
Fig. 2 by arranging its CPU 7 to provide a time keeping 
means 9 and accumulating means 10 and also setting a 
memory 8 to include a storage means 11 for storing a 
preset time-measuring period and a renewal means 12 for 
renewing the time-measuring period. Total time value to 
be counted over the preset time -measuring period may be 
optionally set, for example, to correspond to a total 
value of seconds over a period of ten or 100 years, and 
every elapsed time within the preset time -measuring 
period is measured by the time keeping means 9 
constantly counting the total time value. For example, 
the total time values for one, ten and 100 years will be 
as follows: 

Total time value to be counted over a one 
year period = 31,556,925.9747 seconds (one year = 
365.2425 days ) ; 

Total time value to be counted over a ten 
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year period = 315,659,250.9747 seconds; and 

Total time value to be counted over a 100 
year period = 3,155,692,500.9747 seconds 

Here, the "total time value to be counted" is 
5 expressed in time units of 1/10,000 second measured by 
an atomic clock (cesium clock), and a "unique time" is 
given by constantly counting the total time value to 
identify a changing elapsed time within the preset time- 
measuring period. Elapsed time (unique time measurement) 

10 is typically calculated from both an accumulated time and 
a subtracted time, as shown in Fig. 3. Specifically, 
the accumulated time is a time value measured forward or 
incrementally from the zeroth second toward the total 
time value to be counted, while the subtracted time is a 

15 time value measured rearward or decrementally from the 
total time value toward the zeroth second. 
Alternatively, a unique time measurement may be 
calculated from either the accumulated time or the 
subtracted time or by adding some variables to the time 

20 value. 

The accumulating means 10 sequentially accumulates 
successive unit time values measured the time keeping 
means 9; that is, the accumulating means 10 calculates 
an accumulated time Tn from the zeroth second toward the 
25 last second of the total time value Tt to be counted as 
well as a subtracted time from the last second toward 
the zeroth second (Tt - Tn) , so as to constantly provide 
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a changing elapsed time within the preset time -measuring 
period (see Fig. 3). Once the time value accumulated by 
the accumulating means 10 has reached the predetermined 
total time value to be counted Tt (i.e., once the 
5 counting of all the seconds in the 100 year period has 
been completed) , the time period renewal means 12 in the 
memory 8 is activated to renew the time -measuring period 
for another 100 years and instructs the time keeping 
means 9 to count the renewed time -measuring period. In 

10 this way, the unique time generating device provided in 
the computer is updated once for every 100 years. 

Similar unique time generating device is provided 
in each of the second-level computers 2A, 2B, 2n of 

card distributor companies A to n directly connected to 

15 or subservient to the highest-level master computer 1, 
the third- level computers 3A, 3B, . . . , 3n of the 
pachinko houses connected to the second-level computers 
2A, 2B, 2n and the fourth-level computers of the 

individual pachinko game machines 4 and prepaid card 

20 vending machines 5 connected to the third- level computers 
3A, 3B, 3n. All these unique time generating 

devices provided in the above-mentioned computers are set 
to indicate unique elapsed time measurements, different 
from each other, at every given point. For example, as 

25 seen from "product 1" to "product n" in Fig. 4, the 

unique time generating devices are sequentially produced, 
at intervals of, for example, one second, and they are 
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set to start measuring time at different points that 
depend on the production intervals and thus differ in 
measured elapsed time from each other by one second; for 
the same reason, they are set to end measuring time at 
5 different points that are displaced from each other by 
one second due to the differences of their time- 
measurement start points, although the total time value 
to be counted Tt, i.e., the length of the time -measuring 
period (e.g., 3,155,692,500.97 seconds), is the same for 

10 all the products, i.e., unique time generating devices. 
Alternatively, the length of the time -measuring period 
may be made different among these products or unique 
time generating devices. As shown in Fig. 5, the unique 
time generating device 6 provided in the master computer 

15 1 may be set as a master device and the total time 
values Tt of product 1 to product n sequentially 
produced or supplied on the basis of unique time 
generation by the master device may be set to 
progressively become great relative to that of the master 

20 device in such a way that each of the products has a 

total time value Tt greater by one second than that of 
the preceding product. It may be assumed that all these 
unique time generating devices including the master 
device are caused to start measuring time like a 

25 stopwatch. This way, all the unique time generating 

devices including the master device are allowed to start 
measuring at a same start point up to their unique total 
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time values (i.e., up to the end of different time- 
measuring periods); thus, they stop the counting at 
different end points that will sequentially arrive every 
second. As a result, all the unique time generating 
5 devices indicate different elapsed time measurement at 
every given time point within the different time- 
measuring periods, as shown in Fig. 5. 

As clearly shown in Fig. 6, the highest -level 
master computer 1 includes a transmitter means 13 that 

10 transmits, to the respective computers 2A, 2B, 2n 
of the card distributor companies, authentication data 
based on an elapsed time measurement at a given time 
point indicated by the unique time generating device 6 
thereof. Let's assume here that the master computer 1 

15 generates original authentication data Xla, X2a and X3a 
(Fig. 7) corresponding to elapsed times measured by the 
unique time generating device 6 and sequentially issues 
these original authentication data Xla, X2a and X3a to 
one of the second- level computers (e.g., computer 2A) . 

20 Specifically, each of the thus-issued original 

authentication data Xla, X2a and X3a is transmitted to 
the second- level computer (e.g., computer 2A) , where it 
is used as identification (ID) data to authorize issuance 
of a prepaid card, i.e., issuance-authorizing 

25 identification data (see Fig. 7). 

More specifically, each of the original 
authentication data Xla, X2a and X3a transmitted by the 
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transmitter means 13 of the master computer 1 is 
received by the second- level computer of one of the card 
distributors requesting the issuance (e.g., card 
distributor A). As shown in Fig. 8, this second- level 
5 computer 2A of card distributor A also includes a CPU 

15, a memory 16 having provided therein the unique time 
generating device 2A6, a receiver means 17 and a 
transmitter means 18. Each of the original 
authentication data Xla, X2a and X3a received by the 

10 receiver means 17 of the second- level computer is 

temporarily stored into a register means 19 within the 
memory 16 and then read out from the register means 19 
upon request from the host computer of any one of the 
pachinko houses. If the receiver means 17 of the 

15 second-level computer 2A receives a request for issuance 
of authentication data for 1,000 1 , 000-YEN-worth prepaid 
cards, 100 5 , 000-YEN-worth prepaid cards and 20 10, 000- 
YEN-worth prepaid cards, then the computer 2A reads out 
the authentication data Xla, X2a and X3a from the 

20 register means 19 and imparts thereto unique additional 
authentication data Al - AlOOO, Bl - BlOO and CI - C20, 
respectively, that are based on elapsed time measurements 
sequentially output by the unique time generating device 
2A6 of the computer 2A. In this way, unique 

25 authentication data corresponding to the respective 
numbers of the 1,000-YEN, 5, GOO-YEN and 10,000-YEN 
prepaid cards are created on the basis of elapsed time 



-18- 



measurements sequentially output by the unique time 
generating device 2A6; that is, the authentication data 
of the 1,000-YEN prepaid cards will be Xla+Al to 
Xla+AlOOO, the authentication data of the 5, 000 -YEN 
5 prepaid cards will be X2a+Bl to X2a+B100, and the 

authentication data of the 10, 000 -YEN prepaid cards will 
be X3a+Cl to X3a+C20. The thus-created authentication 
data are then transmitted from the transmitter means 18 
of the second-level computer 2A to the host computer 3A 

10 of the pachinko house A, At the same time, the computer 
2A of card distributor A erases the identification, 
actually issued to the pachinko house's host computer 
(e.g., host computer 3A) , from among the issuance- 
authorizing identifications corresponding to the 

15 authentication data Xla, X2a and X3a. Once the 

identification authorizing issuance of a prepaid card 
(issuance-authorizing identification) has run out as a 
result of the erasure, new original authentication data 
are supplied by the master computer 1 . 

20 In each of the pachinko houses (the following 

description will be made primarily about the pachinko 
house A) , the receiver means of the host computer 3A 
receives the authentication data (e.g., Xla+Al, X2a+Bl 
and X3a+Cl) transmitted by the card distributor A. The 

25 host computer of each of the pachinko houses is 

constructed in a similar manner to the second- level 
computer of Fig. 8 and imparts, to the received 
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authentication data (e.g., Xla+Al, X2a+Bl and X3a+Cl), 
identification based on elapsed time measurements 
sequentially indicated by the unique time generating 
device 3A6 of the host computer. Further, in each of 
5 the vending machines 5 capable of dispensing 1,000 -YEN, 
5, 000 -YEN and 10, 000 -YEN prepaid cards to customers, the 
unique time generating device (e.g., 5A1-6) provided in 
its computer imparts additional identification data based 
on elapsed time measurements sequentially indicated 

10 thereby. Thus, the vending machine 5 in pachinko house 
A can sell, to customers, prepaid magnetic cards 20 
which have stored thereon unique authentication data 
{Xla+Al+3A****+5A****) as a result of sequential 
impartment of various unique data based on the respective 

15 elapsed time measurements indicated by the unique time 
generating devices at various hierarchical levels , as 
shown in Fig. 10. 

The ultimate unique authentication data thus 
recorded on each of the prepaid cards 20 (Xla+Al+3A****+5 

20 A****) is transmitted from the lowest -level computer of 
the vending machine 5 to the receiver means of the host 
computer 3A of the pachinko house A, which in turn 
identifies, from the recorded ultimate unique 
authentication data, an up-to-date record or history of 

25 prepaid card issuance by the vending machine 5 and 

transmits the ultimate unique authentication data to the 
receiver means 17 of the second- level computer 2 A of 
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card distributor A shown in Fig. 8- The second- level 
computer 2A of card distributor A receives, by means of 
its receiver means 17, the ultimate unique authentication 
data transmitted from all the associated pachinko houses 
5 and stores them into the register means 19 thereof, via 
which the computer 2A transmits the ultimate 
authentication data to the receiver means 14 of the 
highest-level main computer 1. Then, the master computer 
1 receives the ultimate unique authentication data 

10 transmitted from the computers 2 A to 2n of the 

individual card distributor companies and stores them in 
the register means 21 within the memory 8. 

Note that each of the master computer 1 and 
subservient computers 2 A and 3A of card distributor A 

15 and pachinko house stores the received ultimate unique 
authentication data after collating it with the 
corresponding authentication data (issuance-authorizing 
identification) previously sent to the subservient 
computers. Also, the master computer 1 has prestored 

20 therein various attributes of the unique time generating 
devices provided therein and in all the subservient 
computers as shown in Fig . 5 , so that the master 
computer 1 rejects the registration, in its register 
means, of any ultimate unique authentication data 

25 containing an attribute that does not agree with the 
prestored attributes. 

In the above-mentioned manner, each of the prepaid 
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cards 20 sold by vending machine 1 of pachinko house A 
can be used as a common card universally usable in all 
the pachinko houses under the control of card distributor 
company A or of the master computer 1; for example, the 
5 issued prepaid card 20 can be used for "pachinko game 
machine 4" in pachinko house A. 

The pachinko game machine of each of pachinko 
houses A to n ((the following description will be made 
primarily about pachinko game machine 4) includes a card 

10 reader/writer 22 contained in or connected to the lowest- 
level computer of pachinko game machine 4 as shown in 
Fig. 11. Reading means 23 of the computer in Fig. 11 
reads the ultimate unique authentication data recorded on 
the prepaid card 22 that is inserted in the card 

15 reader/writer 2. The ultimate unique authentication data 
(Xla+Al + 3A**** + 5A****) read out from the prepaid card 22 
by the reading means 23 is transmitted from the 
transmitter means 24 of the computer to the host 
computer 3A of pachinko house A. The ultimate unique 

20 authentication data received by the receiver means of the 
host computer 3A is then forwarded, through the receiver 
means 17 of the computer 2A of card distributor A, to 
the receiver means 14 of the master computer 1 for 
necessary collation. The computer 2A of card distributor 

25 A or the master computer 1 includes a collator means 26 
or 27 as shown in Fig. 6 or 8 , which determines whether 
the ultimate unique authentication data (Xla+Al+3A****+5A* 
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***) received by the receiver means 14 or 17 has been 
duly registered in the up-to-date record or history of 
issuance in the register means 19 or 21. When, for 
example, the collator means 27 in the computer 2A of 
5 card distributor A determines that the unique 

authentication data received from the subservient 
computer (host computer 3A of pachinko house A) does not 
match the data stored in the register means 19, the 
unique authentication data is transmitted from the 

10 transmitter means 18 of the computer 2A to the receiver 
means 14 of the master computer 1, where the data is 
collated by the collator means 26. Thus, as long as the 
collator means 26 or 27 of the master computer 1 or the 
computer 2A of card distributor A determines that the 

15 unique authentication data (Xla+Al+3A****+5A**** ) received 
from the subservient computer (host computer 3 A of 
pachinko house A) matches the data stored in the 
register means 19 or 21, the means 26 or 27 passes the 
determination or collation result, through the host 

20 computer 3A, to the computer of the pachinko game 

machine. Finally, the collation result is received by 
the receiver means 25 shown in Fig. 11. The collation 
result, of the inserted prepaid card, by the collator 
means 26 or 27 thus received by the receiver means 25 is 

2 5 visually shown on a display 28 of pachinko game machine 
4 shown in Fig. 11. If, for example, the prepaid card 
20 inserted in the card reader /writer 22 is collated 
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with the registered data and determined, by the collator 
means 26 or 27 of the higher -level computer, as being a 
genuine or authentic card rightly issued by any one of 
the computers under the control of the master computer 
5 1, an authorizing means 29 accepts the prepaid card 20 
as authentic and displays various information, such as 
the type, issue date and remaining units, of the card 
(see Fig. 11) on the display that is typically in the 
form of an LCD (Liquid Crystal Display) or CRT (Cathode 

10 Ray Tube). If, on the other hand, the prepaid card 20 
inserted in the card reader /writer 22 is collated with 
the registered data, determined, by the collator means 26 
or 27 of the higher-level computer, as not matching the 
data stored in the register means 19 or 21 and such a 

15 collation result is received by the receiver means 25, a 
rejecting means 30 determines the inserted prepaid card 
20 as not being an authentic card rightly issued by any 
one of the computers under the control of the master 
computer 1 and displays a rejection message "This card 

20 is unusable." on a display 28A in the form of an LCD or 
CRT; in this case, the rejecting means 30 also instructs 
the card reader/writer 22 to reject the card as false. 

The prepaid card 20 determined as authentic or 
acceptable by the authorizing means 29 can be used in 

25 pachinko game machine 4 by the holder or user of the 
card. Specifically, if the user, holding a 1,000 -YEN 
prepaid card 20, selectively depresses one of a plurality 
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of buttons on pachinko game machine 4 to purchase 
pachinko balls for 500 YEN (50 units) while referring to 
the information of the card 20 shown on the display 28, 
the selected purchase information is transmitted from the 
5 pachinko game machine's computer, through the host 

computer 3A of pachinko house A and computer 2A of card 
distributor A, to the master computer 1 in association 
with the ultimate unique authentication data stored on 
the card 20 . 

10 In the master computer 1 having received the 

selected purchase information, a renewal means 31 first 
confirms that the unique authentication data (Xla+Al+3A** 
**+5A****) received in association with the selected 
purchase information matches the data previously stored 

15 in the register 21 and then creates identification (ID) 
to authorize the selected purchase. As shown in Fig. 
12, the purchase-authorizing ID is created, as 
authentication-data-updating data Yla, on the basis of an 
elapsed time measurement Yl indicated by the unique time 

20 generating device 6 provided in the master computer 1, 

and the thus-created authentication-data-updating data Yla 
is then transmitted from the receiver means 13 to the 
second- level computer 2A along with the unique 
authentication data (Xla+Al+3A****+5A****) . 

25 Similarly, in the second- level computer 2A of card 

distributor A, a renewal means 32 first confirms that 
the unique authentication data matches the data stored in 
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the register 19 and then creates identification data to 
authorize the selected purchase. As shown in Fig. 12, 
the purchase -authorizing ID is created, as 

authentication-data-updating data Pla, on the basis of an 
5 elapsed time measurement PI indicated by the unique time 
generating device 2A6 provided in the computer 2A, and 
the thus-created authentication-data-updating data Pla is 
then transmitted from the receiver means 18 to the host 
computer 3A subservient to the computer 2A along with 

10 the authentication data Yla created by the master 
computer 1 . 

In the host computer 3A as well, further 
authentication-data-updating data Qla is created on the 
basis of a current elapsed time measurement Q indicated 

15 by the unique time generating device 3A6 and added to 
the received data (Yla+Pl), and the added result is 
transmitted to the pachinko game machine 4. Finally, in 
the pachinko game machine 4, further authentication-data- 
updating data Rla is created on the basis of a current 

20 elapsed time measurement Rl indicated by the unique time 
generating device 4A1-6 provided in its computer and 
added with the data Yla, Pla and Qla to provide ultimate 
authentication-data-updating data ( Yla+Pla+Qla+Rla) , as 
shown in Fig. 12. 

25 In the computer of the pachinko game machine 4, a 

renewal means 33 updates the last -stored unique 
authentication data (Xla+Al+3A****+5A**** ) on the prepaid 
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card 20, on the basis of the updating data 
(Yla+Pla+Qla+Rla) ; the updating may be done by erasing 
the last unique authentication data or adding thereto the 
updating data. What is essential here is that the last- 
5 stored unique authentication data should be altered on 
the basis of the updating data (Yla+Pla+Qla+Rla). The 
alteration of the unique authentication data is effected 
via the card reader /writer 22, and thus the prepaid card 
22 is discharged from the reader /writer 22 with its 

10 unique authentication data altered on the basis of the 
updating data corresponding to the selected purchase of 
pachinko balls for 500 YEN (50 units). 

The altered data (updated unique authentication 
data) is transmitted to the higher-order computers, one 

15 after another, in the hierarchical network structure. 
Thus, in the computer 2A of card distributor A, the 
renewal means 32 replaces the last unique authentication 
data, registered in the register means 19, with the 
updated unique authentication data. Then, in the master 

20 computer 1 as well, the renewal means 31 replaces the 
last unique authentication data, registered in the 
register means 21, with the updated unique authentication 
data. In this way, the up-to-date record or history of 
issuance of the unique authentication data by each of 

25 the higher-order computers is updated. 

Next time the prepaid card 20 is used at any one 
of the pachinko game machines under the control of the 
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master computer 1, the updated unique authentication data 
is read out from the card 20 and collated with the data 
stored In the registers 19 and 20 of the upper-order 
computers to ascertain its acceptability, in a similar 
5 manner to the above-mentioned. At this time, data 
indicative of the most recent use of the card 20 is 
displayed on the display 28 of the pachinko game machine 
28, as shown in Fig. 13. 

As described above, according to the prepaid card 

10 issuing and authenticating system, each of the pachinko 
houses under the control of the master computer 1 
imparts, to every inserted prepaid card 20, additional 
authentication data that is based on respective elapsed 
time measurements indicated by the individual unique time 

15 generating devices, so that various data relating to the 
issuance and use of the card can be recorded on the card 
substantially in a time-series fashion- Therefore, every 
issued prepaid card will have an utterly unique 
identification and its recorded data will be updated upon 

20 insertion into the reader /writer 22. Thus, in a 

situation where 1,000 or 10,000 false prepaid cards are 
fabricated which have same data as recorded on a fairly 
issued authentic card and when someone actually inserts 
one of the cards into a pachinko game machine, the 

25 recorded data on the inserted card is updated in the 

above-described manner, so that all of the other cards 
than the initially inserted one will be automatically 



rejected as unusable or unacceptable (the original 
authentic card will also be rendered unusable). With 
such an arrangement, unfair alteration or tampering or 
forgery of prepaid cards will end in meaningless effort 
5 and thus a thorough self-defense (i.e., safeguard against 
unfair transfer of the cards to other persons and theft 
of the cards) is achieved by the present invention. 

Whereas the authentication-data-updating data are 
passed downward to the fourth-level computer in the 

10 above -described best mode as shown in Fig. 12, such 
updating data may be passed from the fourth-level 
computer upward to the higher- order computers so that 
same authentication-data-updating data is ultimately 
shared between the master computer 1 and the fourth- level 

15 computer and a prepaid card is issued with the updated 
unique authentication data. Further, whereas the above- 
described best mode is arranged such that the data to 
rewrite data to be recorded on a prepaid card 20 is 
transmitted to the higher-order computers after the 

20 necessary collation is performed on the card 20 inserted 
in the card reader /writer 22 and then the card 20 is 
judged to be a fairly issued card, it is preferable that 
such information exchanges be conducted collectively at 
one time . 

25 Moreover, whereas in the above -described best mode 

the unique time generating device is provided in each of 
the computers of the card distributors, pachinko houses 
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and vending machines and pachinko game machines of the 
pachinko houses , all of these computers need not 
necessarily contain such a unique time generating device. 
Namely, in one alternative, the subservient computers 
5 under the control of the master computer 1 may impart , 
to authentication data based on an elapsed time 
measurement and received from the master computer 1 , 
respective unique additional data (differing among the 
computers) so that unique authentication data created by 

10 combining these unique data is recorded on a prepaid 
card 20 to be newly issued or updated (as recited in 
claims 2 and 8 appended hereto). In this case, it is 
preferable that the master computer 1 at the highest 
level in the hierarchical structure should prestore the 

15 respective unique additional data of the individual 

subservient computers so as to be able to ascertain via 
which of the channels has been issued the unique 
authentication data ultimately recorded on the card 20 
and registered or updated in the register means 21 (as 

20 recited in claim 8 appended hereto) . 

Furthermore, the subservient computers under the 
control of the master computer 1 have been described 
above as providing the unique time generating devices 
that indicate different elapsed time measurements at 

25 every given time point. Each of these unique time 
generating devices may be implemented by a software 
program installed in the corresponding computer, or may 
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be provided on an IC chip built in the computer, or may 
be a discrete driver or generator external to the 
computer. Further, the unique time generating device may 
be provided in each of the subservient computers under 
5 the control of the master computer 1 with the master 
computer 1 or owner of the computer 1 operating as an 
initial or original card supplier (as recited in appended 
claims 6 and 7). Namely, if the initial card supplier 
is arranged to prestore contents of data to be generated 

10 by the individual unique time generating devices which 
include their respective elapsed time measurements as 
well as their respective attributes relative to the 
master computer 1, it is possible to ascertain via which 
procedure has been issued the unique authentication data 

15 ultimately recorded on the card 20 and registered or 

updated in the register means 21 (as recited in appended 
claim 8). In addition, the computer of each of the card 
distributors may be set to operate as a secondary 
supplier which supplies the lower- order computers with 

20 unique time measurements received from the master 
computer 1 . 

In the above -described best mode, each of the 
vending machines 5 and pachinko game machines 4 has a 
computer or unique time generating device. 
25 Alternatively, without employing such a system, the host 
computer of each of the pachinko houses may be set to 
operate as a lowest -level computer which collectively 
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controls the individual vending machines 5 and pachlnko 
game machines 4. In this case, the host computer 
creates and update the unique authentication data and 
then records the authentication data on a prepaid card 
5 that is issued by the vending machine 5 and used in the 
pachlnko game machine 4 . 

The highest -level computer in the hierarchical 
structure has been described above as the "master 
computer" 1 controlling a plurality of other computers. 

10 In this sense, any one of the computers of the card 

distributors and host computers of the pachlnko houses 
may be set to function as the master computer. 

Furthermore, the best mode has been described 
above in relation to prepaid cards for use in pachlnko 

15 game machines, the present invention may be applied to 
other prepaid card Instruments , such as those for 
railroads , ships , airplanes , telephones , amusement parks 
(as recited in appended claim 9). In this case, the 
system according to the above- described best mode may be 

20 provided in the host computers of the card distributors 
or in the computers of the vending machines or in 
computers of automatic ticket checkers, telephones or 
various equipment installed in the amusement parks (as 
recited in appended claims 38 and 39). 

2 5 As obvious from the foregoing description, the 

present invention achieves the superior benefit that it 
can effectively avoid damages which would be caused by 
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any person stealing or tampering authentication data 
recorded on recording media. 

Examples of Practical Applications : 
5 ( Example 1 ) 

Now, the present invention will be described in 
relation to a case where it is used for mutual 
authentication between computers on a hierarchical 
communication network. Fig. 14 is a diagram illustrating 

10 a hierarchical network of computers installed within a 

company. In this example, a host or master computer 41 
of the company does not itself contain a unique time 
generating device; instead, such a unique time generating 
device is provided in each of the lower- level computers 

15 subservient to the master computer 41 (as recited in 

appended claims 4, 5, 6 and 7). Directly connected to 
the master computer 41 are the computers 42, 43 and 44 
of a sales department, accounting department and 
administration department. Further, the computers 45, 

20 46, 47 and 48 of individual sales sections are connected 
to the sales department's computer 42, the computers 49 
and 50 of individual accounting sections to the 
accounting department's computer 43, and the computers 51 
and 52 of individual administration sections to the 

25 administration department's computer 44. The computers 
subservient to or under the control of the master 
computer 41 are interconnected via the network for 
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interconununication . Each of the computers other than the 
master computer 41 is provided with a unique time 
generating device 42A - 52A. As in the above -described 
best mode, all of these unique time generating devices 
5 42A to 52A are set to measure unique or different 

elapsed times at every given time point. Memory 54 of 
the master computer 41 includes a data memory 55 in 
which are prestored various data on the unique time 
generating devices 42A to 52 A provided in the individual 

10 lower-level computers under the control of the master 

computer 41. The master computer 41 also includes a CPU 
56, a renewal means 57, a collator means 58, a 
transmitter means 59 and a receiver means 60. The 
memory 54 of the master computer 41 further includes a 

15 register means 61. 

Each of the lower- level or subservient computers 
42 to 53 includes a CPU 61, a renewal means 62, a 
transmitter means 63, a receiver means 64, a reading 
means 65, an authorizing means 66 and a rejecting means 

20 67, as shown in Fig. 16. 

For example, when the computer 45 of the first 
sales section desires to access the computer 50 of the 
second accounting section to request supply of some 
accounting-related information, the CPU 61 of the 

25 computer 45 creates unique authentication data TKA, 

peculiar to the computer 45, based on an elapsed time 
measurement TK indicated by the unique time generating 
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device 45A and transmits the thus -created unique 
authentication data to the higher- level sales 
department's computer 42 via the transmitter means 63 
(see Fig. 16). In turn, the sales department's computer 
5 42 forwards the unique authentication data to the 

receiver means 42 of the master computer 41. Thus, in 
the master computer 41, the collator means 58 connected 
to the CPU 56 collates the unique authentication data 
TKA, received by the master computer 41, with the 

10 information on the individual unique time generating 

devices prestored in the data memory 55, to find which 
of the subservient computers has created and issued the 
authentication data TKA. Once the unique authentication 
data TKA is determined as having been fairly created and 

15 issued by any one of the subservient computers as a 

result of the collation, the master computer 41 registers 
the authentication data TKA in the register means 61 as 
part of an up-to-date record or history of unique 
authentication data issuance by the subservient computer 

20 (see Fig. 15). Once the unique authentication data TKA 
is duly registered in the register means 61, the 
transmitter means 59 of the master computer 41 transmits 
information, authorizing the desired access, to the 
receiver means 64 of the computer 45 of the first sales 

25 section by way of the sales department's computer 42. 
Thus, in response to the acceptance or 
authorization of the desired access, the computer 45 of 
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the first sales section sends, via the transmitter means 
63, data to initiate the access to the computer 50 of 
the second accounting section. At that time, the unique 
authentication data TKA is sent, as a unique 
5 identification of the computer 45, to the receiver means 
64 of the computer 50 of the second accounting section 
along with a request for the accounting-related 
information. 

Then, in the computer 50 of the second accounting 

10 section, the reading section 65 reads the unique 
authentication data TKA from among the received 
information, and the thus -read authentication data TKA is 
transmitted from the transmitter means 63, via the 
accounting department's computer 43, to the receiver 

15 means 60 of the master computer 41, where the data TKA 
is subjected to the collation (see Fig. 16). 

In the master computer 41, the collator means 58 
collates the received authentication data TKA to 
determine whether the received data duly matches the data 

20 registered in the register means 61. If the 

authentication data TKA matches the data registered as an 
up-to-date record or history of issuance of unique 
authentication data by the subservient computer, the 
master computer 41 transmits the collated result from its 

25 transmitter means 59 to the computer 50 of the second 

accounting section by way of the accounting department's 
computer 43. 
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In this way, the receiver section 64 in the 
computer 50 of the second, accounting section receives the 
collated unique authentication data TKA. If the collated 
unique authentication data TKA is judged to be proper 
5 data (that has been fairly created and issued by any one 
of the subservient computers), then the authorizing means 
6 6 in the computer 50 permits further communication with 
the computer 45 of the first sales section, in response 
to which the requested accounting-related information is 

10 supplied to the computer 45. 

If, on the other hand, the collated unique 
authentication data TKA is judged to be improper data 
(that has not been fairly created and issued by any one 
of the subservient computers), then the rejecting means 

15 67 in the computer 50 inhibits further communication with 
the computer 45 of the first sales section because there 
is a great likelihood that an unauthorized outsider' 
computer is pretending to be the computer 45. 

With the authentication -data issuing and verifying 

20 system in accordance with Example 1 above, each of the 
computers on the hierarchical network can be 
authenticated reliably in accordance with data created 
and issued on the basis of an elapsed time measurement 
indicated by the unique time generating device provided 

25 therein. Thus, it is possible to effectively prevent 

any third person's computer from unfairly conducting data 
exchange by pretending to be one of the subservient 
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computers or intruding into the hierarchical network. 

Whereas in Example 1 unique authentication data 
TKA issued by the computer 45 of the first sales section 
has been described as being transmitted to the master 
5 computer 41 by way of the sales department's computer 

42, such data may be transferred directly to the master 
computer 41. Similarly, data to be collated and 
resultant collated data may be communicated between the 
master computer 41 and the computer 50 of the second 

10 accounting section directly, rather than by way of the 
accounting department's computer 43. 

Further, when the computer 45 of the first sales 
section desires further access to the computer 50 of the 
second accounting section in Example 1, the unique 

15 authentication data TKA created and issued earlier may be 
altered by the renewal section 62 on the basis of an 
elapsed time measurement indicated by the unique time 
generating device 45A so that further communication is 
safely made between the two computers 45 and 50 on the 

20 basis of the thus -altered unique authentication data in a 
similar manner to the above -described best mode. In 
this case, the renewal means 57 in the master computer 
41 may update the unique authentication data registered 
in the register means 61 (as recited in appended claims 

25 31 and 32). Also, in such a case, the subservient 
computers may include a memory means (not shown) for 
storing the unique authentication data (including the 
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altered unique authentication data) for use in next 
access. Rather than providing such a memory means in 
the subservient computers, an alternative arrangement may 
be made such that the last -issued unique authentication 
5 data TKA is read out from register means 61 in the 

master computer 41 as the computer 45 of the first sales 
section requests access to the computer 50 of the second 
accounting section and additional data based on a new 
elapsed time measurement received from the computer 45 is 

10 imparted to the authentication data TKA to thereby create 
and issue unique authentication data that is updated in 
both the master and subservient computers . 

Moreover, whereas Example 1 has been described as 
carrying out the further access between the subservient 

15 computers on the basis of such updated unique 

authentication data, unique authentication data may be 
created and issued, as a so-called one-time password, for 
each access on the basis of an elapsed time measurement 
indicated by the unique time generating device provided 

20 in the computer requesting the access (as recited in 
appended claim 9) . 

Furthermore, in addition to the arrangement of 
Example 1, the accessed subservient computer may also 
create and issue unique authentication data via its 

25 unique time generating device and transmit the unique 

authentication data to the accessing computer by way of 
same procedure as taken for the unique authentication 
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data of the latter computer, so as to permit mutual 
authentication between the two computers. Moreover, 
whereas Example 1 has been described in relation to the 
case where the computers of the individual sections are 
5 the lowest -level computers in the company, still -lower- 
level computers may be connected to the sections ' 
computers for use at various stations or by individual 
constituent members belonging to the sections and 
departments (as recited in appended claim 16). 

10 (Example 2) 

Next, the authentication-data issuing and verifying 
system of the present invention will be described in 
relation to a case where it is applied to mutual 
authentication among computers of various banking 

15 agencies (as recited in appended claims 10 to 15, 20, 
22, 38, 39, etc.) This example assumes that account 
transfers, settlements of account, etc, between the 
banking agencies are conducted via the respective 
computers. Further, in each of the banking agencies, 

20 various services to individual customers, such as money 
changing, loaning, payment into accounts and money 
withdrawal, are recorded in the computer in association 
with their account numbers and the like . In Example 2 , 
such various operations between the banking agencies and 

25 between the banking agencies and their customers are all 
executed on the basis of unique authentication data. 

Fig. 17 is a diagram illustrating a hierarchical 
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network of the computers in Example 2 , where reference 
numeral 70 represents a host computer of the central 
bank (e.g., the Bank of Japan) that functions as a 
master computer exercising general control of the other 
5 computers in the hierarchical network. To the master 
computer 70 are connected computers of various lower- 
level or subservient banking agencies, such as host 
computers 71 of city banks, host computers 72 of local 
banks, host computers 73 of credit banks and host 

10 computers 74 of credit unions — for simplicity, only one 
host computer is shown and will be described for each of 
the subservient banking agencies. Further, to the 
computer of each of the banking agencies are connected 
host computers of main and local offices and branches, 

15 actually performing banking operations, of the associated 
banking agencies. Furthermore, to the host computer of 
each of the main and local offices and branches are 
connected computers of on-line terminals (including cash 
dispensers). In the computers of the central bank down 

20 to the on-line terminals, there are provided unique time 
generating devices, one for each computer, which count 
time within different time -measuring periods to indicate 
different elapsed time measurements at every given time 
point, as described earlier in relation to the above- 

25 described best mode. Data relating to the individual 

unique time generating devices are stored together in a 
data memory of the host computer 70 of the central bank 
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for general management by the host computer 70, similarly 
to the arrangement of Fig. 15. 

Each of the computers on the hierarchical network 
is arranged to create and issue unique authentication 
5 data in a similar manner to the best mode or Example 1 , 
when conducting, via a given terminal computer, a 
transaction (such as settlement of a draft or check or 
remittance) with the computer of another banking agency 
or another office of the same banking agency. For 

10 example, when settlement of a check issued by one of the 
branches of the local bank 72 is requested thereto via 
the on-line terminal of one of the branches of the city 
bank 71, a request for access to the branch of the local 
bank 72 is sequentially made from the on-line terminal, 

15 through the city bank's host computer 71, to the central 
bank's host computer 70. In response to such a request, 
the central bank's host computer 70 creates and issues 
authentication data TLl, representative of authorization 
of the requested access, on the basis of an elapsed time 

20 measurement indicated by the unique time generating 

device provided in that host computer. Then, the local 
bank's host computer 71 creates and issues authentication 
data TL2 on the basis of an elapsed time measurement 
indicated by its unique time generating device and adds 

25 the authentication data TL2 to the authentication data 
TLl received from the central bank's host computer 70. 
Thereafter, the branch's computer creates and issues 
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authentication data TL3 on the basis of an elapsed, time 
measurement indicated by its unique time generating 
device and adds the authentication data TL3 to the 
authentication data TL2, and the terminal's computer 
5 creates and issues authentication data TL4 on the basis 
of an elapsed time measurement indicated by its unique 
time generating device and adds the authentication data 
TL4 to the authentication data TL3 so as to provide 
unique authentication data TL1+TL2+TL3+TL4 . Thus, the 

10 terminal's computer transmits the unique authentication 

data TL1+TL2+TL3+TL4 to the computer of the local bank's 
branch as check- settling identification ID along with 
check settlement information. Prior to the transmission, 
the issued unique authentication data is sequentially 

15 sent to the higher- order computers so that it is 

registered in register means (not shown) of the branch's 
and local bank's host computers and ultimately in 
register means (not shown) of the central bank's host 
computer 70. The computer of the local bank's branch, 

20 having received the check settlement request, reads the 

unique authentication data TL1+TL2+TL3+TL4 from among the 
received information and transmits the thus -read data to 
the higher- order computers so that the data is 
ultimately collated in the central bank's host computer 

25 70. Specifically, in the central bank's host computer 

70, a collator means (not shown) collates the the unique 
authentication data received from the computer of the 
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local bank's branch in order to ascertain whether the 
data matches the authentic data registered in the 
register means. The collated result is transmitted to 
the lower-order computers so that it is ultimately 
5 received by the branch's computer. If the received data 
is authentic data, the branch's computer initiates 
procedures necessary for the check settlement on the 
basis of permission from the authorizing means; 
otherwise, it refuses to execute the check settlement 

10 procedures . 

Details of the individual components in the 
authentication-data issuing and verifying system are 
similar to those described earlier in relation to Example 
1 and will not be described here to avoid unnecessary 

15 duplication. 

In the case of a relatively continual transaction, 
such as an account transfer, remittance or debiting, 
occurring monthly between the banking agencies ( including 
transactions between the branches and between branches 

20 and main office of a same banking agency) , unique 

authentication data used in the last transaction may be 
updated, as in Example 1, for used in a next 
transaction. To this end, it is only necessary that 
authentication data be transmitted from the master 

25 computer to the lower- order computers while being 

imparted unique additional data in each of the lower- 
order computers so that the lowest -level (terminal) 
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computer creates and issues updated unique authentication 
data on the basis of the received authentication data, 
similarly to the unique authentication data creating 
procedures of Fig. 17. Registration and verification of 
5 such updated unique authentication data are performed in 
a similar manner to the above- described best mode. 
Example 1 or modifications (as recited in appended claims 
27 to 31) and will not be described here to avoid 
unnecessary duplication. 

10 Although the updated unique authentication data can 

be generated by updating the last unique authentication 
data registered in a renewal means (not shown) of the 
master computer (host computer 70 of the central bank) , 
a similar renewal means may also be provided in each of 

15 the lower- order computers to update the content of the 
unique authentication data stored in the register means 
of the lower-order computer (as recited in appended 
claims 32 and 34). In such a case, the renewal means 
of each of the lower- order computers may retrieve the 

20 updated authentication data registered in the highest - 

level computer of the central bank to thereby update the 
last unique authentication data stored in the register 
means of the lower-order computer (as recited in appended 
claim 33 ) . 

25 Further, in the example of Fig. 17, each of the 

banking agencies uses unique authentication data not only 
in transactions with other banking agencies but also in 
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dxrect transactions with their customers. Each of the 
customers normally holds one or more cards 75 {such as a 
cash card and credit card) associated with his or her 
account opened at the banking agency, and it is expected 
5 that in the near future the customers will also hold 
electronic money cards (so-called "electronic money") 
issued by their banking agencies. Normally, magnetic or 
IC cards used as such money- equivalent cards are issued 
via the terminal computers as shown in Fig. 17, at which 

10 time unique authentication data is created, for each of 
the cards, in accordance with elapsed time measurements 
indicated by the individual unique time generating 
devices on the basis of original authentication data that 
is passed from the central bank's computer 70 to the 

15 lower-order computers while being imparted additional 

data in each of the lower -order computers and the thus- 
created time unique authentication data is recorded onto 
the card along with other information such as account 
information (including information on the current 

20 balance) and credit information (including information on 
the maximum limit of loan) . Each time the thus -is sued 
card 75 is used in the terminal computer of a selected 
banking agency to execute any one of various 
transactions, such as payment into account, money 

25 changing, money withdrawal from deposits and savings, 
deposit of money and inquiry of the current remaining 
balance, the unique authentication data is collated and 
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updated in the master computer 70 (or in any of the 
lower-order computers). Further, for the electronic 
money cards which are expected to be widely used in the 
near future, terminal machines (terminal computers) will 
5 be installed in shops, department stores, etc. and 

connected to the network as shown in Fig. 17, and the 
unique authentication data on the card 75 will be 
collated and renewed each time it is put to actual use. 
As a consequence, the money amount in the account 
10 corresponding to the card 75 is updated, i.e., increased 
or decreased, so that various data are created including 
the up-to-date record of use of the card 75. 

With such an arrangement , theft of the recorded 
data on the card 75 will end in meaningless effort 
15 because the recorded data are automatically altered 
immediately when the card is put to use. 

Further, even in a transaction between the central 
bank and any one of the subservient banking agencies 
(such as supply of money, particularly that of electronic 
20 money, or inquiry or report between the two) , reliable 
authentication is permitted by creating and issuing 
unique authentication data to carry out necessary 
procedures on the thus-issued data. Especially, this 
arrangement allows the central bank's computer to readily 
25 know a total money supply (particularly, that of 

electronic money) , so that the monetary policy of the 
central bank can be properly managed via its host 
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computer 70. Other arrangements and operation of the 
example are similar to those of the above -described best 
mode, example 1 or modifications and will not be 
described here to avoid unnecessary duplication. 
5 (Example 3) 

Fig. 18 is a diagram showing a hierarchical 
network structure where the authentication-data issuing 
and verifying system is provided in each of a plurality 
of computers owned by a railroad company (as recited in 

10 appended claims 18, 19. 38, 39, etc.). In the 

illustrated example, reference numeral 80 represents a 
host computer of the railroad company, to which are 
connected subservient computers of individual stations, 
tourist bureaus and convenience stores --only one 

15 station, tourist bureau and convenience store are shown 
and will be described for simplicity-- that control 
issuance of railroad tickets. To each of the 
subservient computers are connected computers contained 
in or attached to ticket vending machines that issue 

20 various tickets with magnetic data recorded thereon, such 
as ordinary railroad passenger tickets, coupon tickets, 
commuter passes and platform tickets, as well as prepaid 
(magnetic) cards for utilizing the railroad facilities. 
The host computer 80 of the railroad company is also 

25 connected with computers of automatic ticket checkers 81 
that are placed at the ticket gates of the individual 
railroad stations to read information recorded on the 



prepaid cards and tickets. In this example, a unique 
time generating device is provided in each of the host 
computer 80 of the railroad company, computers of the 
station, tourist bureaus and convenience store and 
5 computers of the lowest -level vending machines and ticket 
checkers 81. Thus, unique authentication data, created 
and issued by the unique time generating devices on the 
basis of unique elapsed time measurements in a similar 
manner to Example 2 above, will be recorded, along with 

10 railroad service information indicative of a travel 
section, type and No. of a reserved seat, term of 
validity, etc.), onto each of the tickets and prepaid 
cards sold via the vending machines. To this end, each 
of the computers of the vending machines and ticket 

15 checkers 81 is provided with a reader /writer which reads 
and write data on the tickets and prepaid cards. 

The tickets and prepaid cards issued via the 
vending machines can be used to pass through the 
automatic ticket checkers and the prepaid cards can be 

20 used to purchase tickets from the vending machines, 

during which time the unique authentication data recorded 
on each of these tickets and prepaid cards is read via 
the reader /writer and then transmitted to the host 
computer 80 of the railroad company for the subsequent 

25 collation. Namely, the host computer 80 collates the 
received unique authentication data with previously 
registered data in the register means and then sends the 
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collated result to the ticket checker 81 or vending 
machine in which the ticket or prepaid card has been 
inserted. The ticket checker 81 or vending machine, 
having received the collated result , permits the use of 
5 the ticket or prepaid card if the ticket or prepaid card 
has been determined as authentic, but otherwise it 
rejects the use of the ticket or prepaid card. Each of 
the tickets and prepaid cards thus accepted is subjected 
to necessary rewriting or updating of the recorded 

10 railroad service information and the unique 

authentication data on the basis of authentication data 
and the like imparted by the higher- order computers in a 
similar manner to the above -described best mode and 
examples. The updated data are sent to the host 

15 computer 80 of the railroad company to update the 

previously registered unique authentication data in the 
register means thereof. For tickets having a specific 
terra of validity, such as commuter passes and platform 
tickets , the recorded data may be automatically erased 

20 via the register means upon expiration of the term. 

Such a system for issuing and authenticating 
tickets and prepaid cards can of course be applied to 
other transportation companies than railroad companies, 
such as airline companies , shipping companies and bus 

25 companies. In every such application, it is only 

necessary that information indicative of the shipping, 
airline or bus services be recorded on the ticket or 
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prepald card along with the unique authentication data. 
Possible examples of the ticket and prepaid card for use 
with the present inventive system include cards and 
tickets for amusement parks, lottery tickets and gift 
5 certificates issued by department stores, tickets for 
various recreational facilities, and tickets for 
automatic vending machines. In every such case, each 
amount due is subtracted from the money amount (current 
balance) recorded on the card or ticket and 
10 simultaneously the unique authentication data is updated 
to thereby prevent unfair or unauthorized use of the 
card or ticket . 
( Example 4 ) 

The identification data issuing and verifying 
15 system in accordance with the present invention is also 
applicable to various other types of transaction card, 
such as cards issued by credit companies, securities 
companies, insurance companies, loan companies and trust 
companies. For example, each card issued by a credit 
20 company, as shown in Fig. 19, on the basis of 

information on the customer's credit standing can be used 
in every member store of the credit company, and the 
unique authentication data recorded on the card is of 
course updated each time the card is used. Further, 
25 information on every transaction in the member store is 
sent, along with the unique authentication data, to a 
host computer 83 of an associated bank as well as a host 
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computer 82 of the credit company, so that necessary 
settlement procedures can be performed between the host 
computers of the bank and credit company on the basis of 
the unique authentication data, 
5 (Example 5) 

The authentication-data issuing and verifying 
system in accordance with the present invention is 
applicable to computers used by an administrative organ 
(as recited in appended claim 17) as well as companies 

10 and other profit-making and non-profit-making 

organizations as described earlier in relation to Example 
1 . Namely , in Example 5 , a host computer of the 
administrative organ is set to function as a master 
computer, and the other computers used at various 

15 stations and by constituent members of the organ are 

made to function as lower-level computers subservient to 
the master computer. Access between these computers 
within the administrative organ is carried out on the 
basis of unique authentication data similarly to the best 

20 mode, examples and modifications as described above - 
The administrative organ, as shown in Fig. 20, 
supplies residents with ID cards 85 issued via a card 
issuing machine 84. At that time, the issuing machine 
84 may record unique authentication data created on the 

25 basis of respective authentication data transmitted 

thereto from the host computer 86 and the computer 87 of 
a main office 86 and added together one after another 
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(as recited in appended claims 11 and 38). Increased 
efficiency of the administrative management may be 
achieved by allowing the residents to get their desired 
service using the thus-issued ID cards 85 on terminal 
5 machines 90 positioned in the main, branch or local 
office of the administrative organ. In these cases, 
unfair use of the ID cards by unauthorized persons can 
be effectively prevented because the unique 
authentication data recorded on each of the cards is 

10 updated immediately every time the card is used on the 
terminal machine 90. 

Whereas the best mode, examples and modifications 
have been described above mainly in relation to magnet ic- 
type prepaid cards and cash cards , ID cards , etc . , the 

15 principle of the present invention may also be applied 
to various other storage media, such as floppy disk and 
writable CD-ROM. Where the present invention is applied 
to an IC card, it is possible to incorporate in the IC 
card a unique time generating device operating on the 

20 basis of data received from a higher-level computer, 

because the IC card can itself contain an electric cell. 
Further, by attaching the IC card to a handy- type 
personal computer for connection to communication lines , 
the computer can work as a lowest -level computer in the 

25 hierarchical network structure. 

Moreover, whereas the best mode and examples have 
been described above as communicating the level- specif ic 
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authentication data and the ultimate unique 
authentication data with no particular modification made 
thereto, it is preferable to encrypt these data via an 
encoder device. Particularly, it is desirable that these 
5 data be appropriately protected from being significantly 
influenced in a direct manner by a lower-level computer 
and that the unique time generating devices and their 
behavior remain invisible . 

10 INDUSTRIAL APPLICABILITY 

With the present invention having been described 
so far, authentication of any one of a plurality of 
computers interconnected via communication lines or 
mutual authentication between the computers can be 

15 performed with greatly increased accuracy. It is also 
possible to more accurately authenticate a recording 
media storing thereon authentication data issued from any 
of the computers- Further, because the unique 
authentication data is created and issued or updated or 

20 altered every time the recording media having the data 
stored thereon is put to actual use, the present 
invention can always grantee a secure transaction even 
when the unique authentication data is leaked to any 
third person. Thus, the present invention will find a 

25 variety of applications, such as authentication of 

various money -equivalent transaction instruments such as 
prepaid cards and cash cards, authentication of tickets. 



-54- 



coupon tickets and electronic money, authentication of 
personalized ID cards, and computer-based authentication 
between companies, between banking agencies and between 
administrative organs. 



-55- 



CLAIMS 



1. An authentication-data issuing system based on 
unique time, said authentication-data issuing system 
5 including a plurality of computers connected with each 

other via communication lines with one of said computers 
set to function as a master computer, said master 
computer comprising: 

a unique time generating device including time 

10 keeping means for sequentially outputting unit time 

values at predetermined intervals over a preset time- 
measuring period that begins at a given start point on a 
selected date and terminates at a given future end point 
and accumulating means for sequentially accumulating said 

15 unit time values output by said time keeping means so as 
to constantly measure a changing elapsed time within the 
time -measuring period; 

transmitter means for, during communication between 
said master computer and another of the computers 

20 subservient to said master computer, transmitting, from 
said master computer to the subservient computer, 
authentication data based on an elapsed time measurement, 
corresponding to a given time point , indicated by said 
unique time generating device; and 

25 register means for receiving and registering an 

issuance history of unique authentication data created 
and issued by said subservient computer imparting 
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additional data, unique to said subservient computer, to 
the authentication data transmitted by said master 
computer . 

5 2. An authentication-data issuing system based on 
unique time, said authentication-data issuing system 
including a plurality of computers connected with each 
other via communication lines with one of said computers 
set to function as a master computer, said master 

10 computer including a unique time generating device 

including time keeping means for sequentially outputting 
unit time values at predetermined intervals over a preset 
time-measuring period that begins at a given start point 
on a selected date and terminates at a given future end 

15 point and accumulating means for sequentially 

accumulating said unit time values output by said time 
keeping means so as to constantly measure a changing 
elapsed time within the time -measuring period, 

each of the computers subservient to said master 

20 computer comprising: 

receiver means for, during communication with said 
master computer, receiving authentication data based on 
an elapsed time measurement, corresponding to a given 
time point , indicated by said unique time generating 

25 device of said master computer; 

issuer means for creating and issuing unique 
authentication data by imparting additional data, unique 
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to said subservient computer, to the authentication data 
received via said receiver means from said master 
computer; and 

transmitter means for transmitting, to said master 
5 computer, an issuance history of the unique 

authentication data created and issued by said issuer 
means . 

3. An authentication -data issuing system as recited in 
10 claim 2 wherein said issuer means in each of the 
subservient computers includes imparting means for 
imparting the additional data, unique to said subservient 
computer, to the received authentication data, and said 
imparting means includes a unique time generating device 
15 that includes time keeping means for sequentially 

outputting unit time values at predetermined intervals 
over a preset time -measuring period that begins at a 
given start point on a selected date and terminates at a 
given future end point and accumulating means for 
20 sequentially accumulating said unit time values output by 
said time keeping means so as to constantly measure a 
changing elapsed time within the time -measuring period, 
and 

wherein said unique time generating device in said 
25 imparting means indicates elapsed time measurements over 
the time -measuring period that is different from the 
time -measuring periods of the unique time generating 
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devices provided in said master computer and other 
subservient computers and creates and issues unique 
authentication data peculiar to said subservient 
computer. 

5 

4. An authentication-data issuing system based on 
unique time, said authentication-data issuing system 
including a plurality of computers connected with each 
other via communication lines with one of said computers 

10 set to function as a master computer, each of the 

computers subservient to said master computer comprising: 

a unique time generating device including time 
keeping means for sequentially outputting unit time 
values at predetermined intervals over a preset time- 

15 measuring period unique to said computer that begins at 

a given start point on a selected date and terminates at 
a given future end point and accumulating means for 
sequentially accumulating said unit time values output by 
said time keeping means so as to constantly measure a 

20 changing elapsed time within the time-measuring period; 

issuer means for creating and issuing unique 
authentication data, peculiar to said subservient 
computer, on the basis of an elapsed time measurement 
indicated by said unique time generating device; and 

25 transmitter means for transmitting, to said master 

computer, an issuance history of the unique 
authentication data created and issued by said issuer 
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means . 

5. An authentication-data issuing system based on 
unique time, said authentication -data issuing system 

5 including a plurality of computers connected with each 

other via communication lines with one of said computers 
set to function as a master computer, each of the 
computers subservient to said master computer comprising 
a unique time generating device including time keeping 

10 means for sequentially output ting unit time values at 
predetermined intervals over a preset time-measuring 
period unique to said computer that begins at a given 
start point on a selected date and terminates at a given 
future end point and accumulating means for sequentially 

15 accumulating said unit time values output by said time 
keeping means so as to constantly measure a changing 
elapsed time within the time-measuring period, 

said master computer, exercising general control of 
the subservient computers , including register means for 

20 receiving and registering an issuance history of data 

created and issued by each of said subservient computers 
on the basis of an elapsed time measurement indicated by 
said unique time generating device of said subservient 
computer. 

25 

6, An authentication- data issuing system as recited in 
claim 3 or 4 wherein said master computer functions as 
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an original supplier of unique time to said subservient 
computers so that said unique time generating devices of 
said subservient computers are activated to indicate 
elapsed time measurements within their respective preset 
5 time -measuring periods different from each other. 

7. An authentication-data issuing system as recited in 
claim 3 or 4 wherein said master computer functions as 
an original supplier of unique time to said subservient 

10 computers so that said unique time generating devices of 
said subservient computers are activated to indicate 
elapsed time measurements within their respective preset 
time-measuring periods different from each other, and 
each of the computers that are immediately subservient to 

15 said master computer is a second-level computer that 

functions as a secondary supplier of unique time data to 
third- level computers subservient to said second- level 
computer so that the unique time generating devices of 
said third-level computers are activated to indicate 

20 elapsed time measurements within their respective preset 
time -measuring periods different from each other. 

8. An authentication- data issuing system as recited in 
any one of the preceding claims wherein said master 

25 computer includes storage means for storing data on said 
unique time generating device of each of the subservient 
computers which include data indicative of the time- 
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measurlng period of said unique time generating device, 
or 

data on attributes of said unique time generating 
devices of said master computer and each of said 
5 subservient computers, or 

unique additional data to be imparted, by each of 
said subservient computers, to the authentication data 
received from said master computer. 

10 9- An authentication-data issuing system as recited in 
any one of claims 1 to 7 wherein the unique 
authentication data created and issued by each of said 
subservient computers is transmitted to and used by one 
or more other subservient computers under control of said 

15 master computer every time a transaction involving use of 
the unique authentication data is performed. 

10. An authentication-data issuing system as recited 
in any one of claims 1 to 7 wherein the unique 

20 authentication data created and issued by each of said 
subservient computers includes various information to be 
transmitted to one or more other subservient computers 
under control of said master computer, said various 
information including any of information representative 

25 of nature of a transaction, merchandise, settlement of 
account and credit standing. 
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11. A recording media having stored thereon unique 
authentication data created by any one of said 
subservient computers as recited in any one of claims 1 
to 7, said recording media being issued by said 

5 subservient computer. 

12. A recording media as recited in claim 11 which 
comprises a floppy disk, IC card, magnetic card or 
writable CD-ROM. 

10 

13. A recording media as recited in claim 11 where 
the unique authentication data stored thereon includes 
any of monetary information, information on credit loan, 
money information indicative of a current balance of 

15 deposit or saving in a particular account, and 

information indicative of permission or refusal of use of 
an amusement part, game house, recreational facility, a 
railroad, bus, ship, airplane, telephone, facsimile, 
automatic vending machine or the like. 

20 

14. An authentication- data issuing system as recited 
in any one of claims 1 to 7 wherein said mater computer 
is a host computer of a central bank exercising general 
control of banking operations and said subservient 

25 computers are computers of banking agencies such as city, 
local and credit banks under control of the host 
computer of the central bank, and wherein a transaction. 
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such as money supply, settlement, loaning, money changing 
or payment into account, between any one of the banking 
agencies and a customer is performed on the basis of 
unique authentication data created and issued for each 
5 transaction. 



15. An authentication-data issuing system as recited 

in any one of claims 1 to 7 wherein said master computer 
is a host computer of a main office of a banking agency 

10 exercising general control of a plurality of branches, 
local offices and the like of the banking agency and 
said subservient computers are computers installed in the 
main office, branches and local offices of the banking 
agency, and wherein a transaction, such as money supply, 

15 settlement, loaning, money changing or payment into 

account, between any one of the subservient computers and 
a customer is performed on the basis of unique 
authentication data created and issued for each 
transaction. 

20 

16. An authentication-data issuing system as recited 
in any one of claims 1 to 7 wherein said mater computer 
is a host computer of a main office exercising general 
control of an organization such as a company or 

25 corporation and said subservient computers are computers 
for use at various stations or by constituent members of 
the organization, and wherein an operation to be effected 
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by each of the stations or constituent members is 
performed on the basis of unique authentication data 
created and issued by the corresponding subservient 
computer for each operation. 

5 

17. An authentication-data issuing system as recited 
in any one of claims 1 to 7 wherein said mater computer 
is a host computer of an administrative organ exercising 
general control of administrative affairs and said 

10 subservient computers are computers for use at various 

stations or by constituent members of the administrative 
organ, and wherein an operation to be effected by each 
of the stations or constituent members is performed on 
the basis of unique authentication data created and 

15 issued by the corresponding subservient computer for each 
operation . 

18. A recording media as recited in claim 11 wherein 
said mater computer is a host computer of a 

20 transportation company exercising general control of 
operations for issuing various tickets, such as an 
ordinary passenger ticket, railroad and ship tickets, 
coupon ticket, commuter pass and airline ticket and said 
subservient computers are computers contained in vending 

25 machines installed in a station, airlines, shipping 

company, tourist bureau, convenience store and the like, 
said recording media being employed as the thicket issued 
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by any one of the vending machines and having stored 
thereon unique authentication data that is created by 
said subservient computer of the vending machine every 
time the ticket is used. 

19. A recording media as recited in claim 11 wherein 
said mater computer is a host computer exercising general 
control of operations for issuing various prepaid cards 
for using a railroad, ship, airplane, pachinko game 
machine, telephone, amusement park and the like and said 
subservient computers are computers contained in vending 
machines for issuing the prepaid cards, said recording 
media being employed as the prepaid card issued by any 
one of the vending machines and having stored thereon 
unique authentication data that is created by said 
subservient computer of the vending machine every time 
the ticket is used. 



20. A recording media as recited in claim 11 wherein 
20 said mater computer is a host compute of a central bank 
exercising general control of operations for issuing 
electronic money and said subservient computers are 
computers contained in money issuing machines for issuing 
electronic money to users, said recording media being 
25 employed as the electronic money issued by any one of 
the money issuing machines and having stored thereon 
unique authentication data that is created by said 
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subservient computer of the money issuing machine every 
time the electronic money is used. 

21. A recording media as recited in claim 11 wherein 
5 said mater computer is a host compute of an 

administrative organ exercising general control of public 
services to be provided to individual residents and said 
subservient computers are computers contained in card 
issuing machines for issuing personalized ID cards that 

10 are to be used by the individual residents to get the 
public services , said recording media being employed as 
the ID card issued by any one of the card issuing 
machines and having stored thereon unique authentication 
data that is created by said subservient computer of the 

15 vending machine every time the ID card is used. 

22. A recording media as recited in claim 11 wherein 
said mater computer is a host compute exercising general 
control of operations of a banking agency, credit 

20 company, securities company, insurance company, loan 

company and trust company issuing cards such as a cash 
card, loan card and credit card and said subservient 
computers are computers contained in card issuing 
machines for issuing cards to individual customers , and 

25 which is employed as said card issued by any one of the 
card issuing machines and has stored thereon in magnetic 
form unique authentication data that is created by said 
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subservient computer of the money issuing machine every 
time the card is used. 

23. An authentication- data verifying system including 
plurality of computers connected with each other via 
communication lines with one of said computers set to 
function as a master computer, each of the computers 
subservient to said master computer comprising: 

reading means for reading unique authentication 
data issued by any one of the subservient computers on 
the basis of information received from another of the 
subservient computers, or reading unique authentication 
data issued by any one of the subservient computers and 
recorded on a recording media; 

transmitter means for transmitting the unique 
authentication data read by said reading means to said 
master computer for subsequent collation thereby; and 

receiver means for receiving from said master 
computer a result of collation between an issuance 
history of the unique authentication data by each of 
said subservient computers registered in said master 
computer and the unique authentication data transmitted 
by said transmitter means. 

24. An authentication -data verifying system including 
plurality of computers connected with each other via 
communication lines with one of said computers set to 



function as a master computer, said master computer 
comprising: 

receiver means for receiving unique authentication 
data transmitted by transmitter means of any one of the 
5 computers subservient to said master computer, said 
unique authentication data being issued by the 
subservient computer and read by reading means of the 
subservient computer; and 

collator means for collating between the unique 
10 authentication data received by said receiver means and 
an issuance history of the unique authentication data by 
each of said subservient computers that is registered in 
said master computer; and 

transmitter means for transmitting a result of 
15 collation by said collator means to receiver means of 
the subservient computer. 

25. An authentication-data verifying system as recited 
in claim 23 wherein each of said subservient computers 

20 includes rejecting means which when a result of the 

collation by said collator means of said master computer 
indicates that the unique authentication data read by 
said reading means is not present in the issuance 
history, rejects subsequent access between said 

25 subservient computer and another of said subservient 

computers or rejects use, in said subservient computer, 
of a recording media having stored thereon the unique 
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authentication data. 



26. An authentication-data verifying system as recited 
In claim 23 wherein each of said subservient computers 
includes authorizing means which when a result of the 
collation by said collator means of said master computer 
indicates that the unique authentication data read by 
said reading means is present in the issuance history, 
authorizes subsequent access between said subservient 
computer and another of said subservient computers or 
authorizes use, in said subservient computer, of a 
recording media having stored thereon the unique 
authentication data. 



15 27. An authentication-data issuing system based on 
unique time, said authentication-data issuing system 
including a plurality of computers connected with each 
other via communication lines with one of said computers 
set to function as a master computer, each of the 

20 computers subservient to said master computer being 

accessed by another of the subservient computers on the 
basis of unique authentication data authorized by said 
authorizing means recited in claim 26 or being connected 
with a recording media, having stored thereon the unique 

25 authentication data whose use is permitted by said 
authorizing means recited in claim 26, 

said master computer comprising a unique time 
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generating device including time keeping means provided 
in said master computer for sequentially outputting unit 
time values at predetermined intervals over a preset 
time -measuring period that begins at a given start point 
5 on a selected date and terminates at a given future end 
point and accumulating means for sequentially 
accumulating said unit time values output by said time 
keeping means so as to constantly measure a changing 
elapsed time within the time-measuring period, 

10 each of said subservient computers comprising: 

receiver means for, during communication with said master 
computer, receiving authentication data based on an 
elapsed time measurement, corresponding to a given time 
point, indicated by said unique time generating device; 

15 issuer means for creating and issuing unique 

authentication data by imparting additional data, unique 
to said subservient computer, to the authentication data 
received via said receiver means ; and 

transmitter means for transmitting, to said master 

20 computer, the unique authentication data created and 
issued by said issuer means. 

28. An authentication-data issuing system as recited 
in claim 27 wherein said issuer means in each of said 
25 subservient computers includes imparting means for 
imparting, to the received authentication data, the 
additional data unique to said subservient computer, and 
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said imparting means includes a unique time generating 
device that includes time keeping means for sequentially 
outputting unit time values at predetermined intervals 
over a preset time-measuring period that begins at a 
5 given start point on a selected date and terminates at a 
given future end point and accumulating means for 
sequentially accumulating said unit time values output by 
said time keeping means so as to constantly measure a 
changing elapsed time within the time -measuring period, 
10 and 

wherein said unique time generating device in said 
imparting means indicates elapsed time measurements over 
a time -measuring period that is different from time- 
measuring periods of the unique time generating devices 
15 provided in said master computer and other subservient 
computers and creates and issues unique authentication 
data peculiar to said subservient computer. 

29. An authentication-data issuing system based on 
20 unique time, said authentication- data issuing system 

including a plurality of computers connected with each 
other via communication lines with one of said computers 
set to function as a master computer, each of the 
computers subservient to said master computer being 
25 accessed by another of the subservient computers on the 
basis of unique authentication data authorized by said 
authorizing means recited in claim 26 or being connected 
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with a recording media, having stored thereon unique 
authentication data whose use is authorized by said 
authorizing means recited in claim 26, 

each of said subservient computers comprising: 
5 a unique time generating device for sequentially 

outputting unit time values at predetermined intervals 
over a preset time -measuring period that begins at a 
given start point on a selected date and terminates at a 
given future end point and accumulating means for 

10 sequentially accumulating said unit time values output by 
said time keeping means so as to constantly measure a 
changing elapsed time within the time-measuring period; 

issuer means for creating and issuing unique- 
authentication-data updating data, corresponding to the 

15 authorized unique authentication data, on the basis of an 
elapsed time measurement indicated by said unique time 
generating device; and 

transmitter means for transmitting, to said master 
computer, the unique-authentication-data updating created 

20 and issued by said issuer means. 

30. An authentication- data issuing system based on 
unique time, said authentication- data issuing system 
including a plurality of computers connected with each 
25 other via communication lines with one of said computers 
set to function as a master computer, each of the 
computers subservient to said master computer being 
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accessed by another of the subservient computers on the 
basis of unique authentication data authorized by said 
authorizing means recited in claim 26 or being connected 
with a recording media, having stored thereon unique 
5 authentication data whose use is authorized by said 
authorizing means recited in claim 26, 
said master computer comprising: 
a unique time generating device including time 
keeping means for sequentially outputting unit time 

10 values at predetermined intervals over a preset time- 
measuring period that begins at a given start point on a 
selected date and terminates at a given future end point 
and accumulating means for sequentially accumulating said 
unit time values output by said time keeping means so as 

15 to constantly measure a changing elapsed time within the 
time-measuring period; 

transmitter means for transmitting to, any one of 
the subservient computers, authentication data based on 
an elapsed time measurement, corresponding to a given 

20 time point. Indicated by said unique time generating 
device ; and 

renewal means for receiving unique-authentication- 
data updating data that is created and issued by the 
subservient computer imparting additional data, unique to 
25 the subservient computer, to the authentication data from 
said transmitter means of said master computer, and 
altering the unique authentication data on the basis of 
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the received unique-authentication-data updating data to 
thereby update an issuance history of the unique 
authentication data by said subservient computer that is 
registered in said master computer. 

5 

31. An authentication-data issuing system based on 
unique time, said authentication-data issuing system 
including a plurality of computers connected with each 
other via communication lines with one of said computers 

10 set to function as a master computer, each of the 
computers subservient to said master computer being 
accessed by another of the subservient computers on the 
basis of unique authentication data permitted by said 
authorizing means recited in claim 26 or being connected 

15 with a recording media, having stored thereon the unique 
authentication data whose use is permitted by said 
authorizing means recited in claim 26, 

said subservient computer including a unique time 
generating device which includes time keeping means for 

20 sequentially outputting unit time values at predetermined 
intervals over a preset time-measuring period that begins 
at a given start point on a selected date and terminates 
at a given future end point and accumulating means for 
sequentially accumulating said unit time values output by 

25 said time keeping means so as to constantly measure a 
changing elapsed time within the time-measuring period, 
said master computer including renewal means for 
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recelving unique-authentication-data updating data that is 
created and issued by the subservient computer in 
correspondence with the authorized unique authentication 
data and altering the unique authentication data on the 
5 basis of the received unique- authentication-data updating 
data to thereby update an issuance history of the unique 
authentication data by said subservient computer that is 
registered in said master computer. 

10 32. An authentication-data issuing system as recited 
in claim 30 or 31 wherein said subservient computer 
includes renewal means, similar to said renewal means of 
said master computer, for altering the unique 
authentication data used for gaining authorization to 

15 access to another of the computers or to make use of the 
recording media, on the basis of the unique- 
authentication- data updating data. 

33. An authentication- data issuing system as recited 
20 in claim 32 wherein said renewal means of said 

subservient computer receives data relating to the 
issuance history updated by said renewal means of said 
master computer, in such a way that said subservient 
computer updates the unique authentication data on the 
25 basis of the received data relating to the issuance 
history. 
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34. An authentication-data issuing system as recited 
in claim 32 wherein the unique authentication data 
updated by said renewal means is stored in memory of the 
subservient computer, having accessed using last-issued 

5 unique authentication data, so that the updated unique 
authentication data is used for next access to another 
of the subservient computers . 

35. An authentication-data issuing system as recited 

10 in claim 32 wherein said renewal means alters last-issued 
unique authentication data, stored on the recording media 
used in said subservient computer, on the basis of the 
created and issued unique-authentication-data updating 
data. 

15 

36. An authentication-data issuing system as recited 
in any one of claims 14 to 17 wherein the unique 
authentication data created and issued by said 
subservient computer contains the unique authentication 

20 data updated by said renewal means recited in claim 34. 

37. A recording media having stored thereon unique 
authentication data updated by the unique-authentication- 
data updating data created and issued in claim 35. 

25 

38. An authentication- data issuing system as recited 
in claim 37 wherein the recording media having stored 
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thereon updated unique authentication data is the ticket 
recited in claim 18, prepaid card recited in claim 19, 
electronic money recited in claim 20, ID card recited in 
claim 21 or card recited in claim 22, and wherein the 
5 subservient computer that stores the updated unique 

authentication data on said recording media is contained 
in or attached to an automatic ticket checker or a card 
reader /writer for a prepaid card, ID card or electronic 
money . 

10 

39. An authentication-data issuing system based on 
unique time or recording media issued by said 
authentication-data issuing system as recited in claim 38 
wherein the recording media used in said subservient 

15 computer is a ticket, electronic money, prepaid card or 
other card, and wherein information indicative of a 
current balance calculated by subtracting, from a money 
amount stored on said recording media, a money amount 
spent at the time of creation of the updated unique 

20 authentication data. 
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ABSTRACT 

In an authentication-data issuing system based on 
unique time, a master computer (1) creates authentication 
5 data on the basis of an elapsed time measurement 

indicated by an unique time generating device (6) and 
transmits the created authentication data to a lower- 
level computer (2A), which further delivers the 
authenticating data to a still-lower-level computer (3A). 

10 The lower-level computer and still -lower- level computer 
sequentially impart respective unique additional data to 
the authentication data and then transmits the resultant 
additional-data- imparted data to a lowest-level vending 
machine (5). The lowest -level vending machine (5) also 

15 imparts its unique additional data to the authentication 
data, received from the still-lower-level computer, to 
create unique authentication data and records the thus- 
created unique authentication data on a prepaid card (20) 
to be issued thereby. Simultaneously, the ultimately- 

20 created unique authentication data is sent from the 

vending machine, through the still-lower-level computer 
and lower-level computer, back to the master computer (1) 
for registration therein. When the thus -issued prepaid 
card (20) is used on a pachinko machine in a pachinko 

2 5 house under the control of the master computer (1), the 
pachinko machine reads the unique authentication data 
recorded on the card, and the thus -read data is collated 



-79- 



with the data registered in the master computer (1) to 
ascertain the authenticity of the card. 
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the specification of which is attached hereto unless the following box is checked: 



.was<filed on March 24, 1997 £ 
and was amended on 



1 United States Application Number or PCT International Applic; 
(if applicable). 



n Number PCT/JP97/00972 



0 disclose information which is known by me to be material to patentability as defined in Title 37, Code of Federal 



I hereby claim foreign priority benefits under Title 35, United States Code, § 119(a)-(d) or § 365(b) of any foreign application's) for patent 

„. ; „_ K — Ttr-T' T„*<.™„*4 — i — 1;„„<.; — „,u;„u j„„; — *„j i„„„* — , couutry ottier than the IJnited States, 

r PCT International application having 



or inventor's certificate, or § 365(a) of any PCT International application which designated at least one countr 
listed below and have also identified below any foreign application for patent or inventor's certificate, c 
a filing date before that of the application on which priority is claimed: 



P&IOR FOREIGN APPLICATION(S) 



DAY/MONTH/YEAR FILED 



thereby claim the benefit under Title 35, United States Code § 119(e) of any United States provisional application(s) listed below. 



APPLICATION NO. 



FILING DATE 



I hereby claim the benefit under Title 35, United States Code, § 120 of any United States appUcation(s), or § 365(c) of any PCT International 
application designating the United States, listed below and, insofar as the subject matter of each of the claims of this application is not disclosed 
in ±e prior United States or PCT International application in the manner provided by the first paragraph of Title 35, United States Code, § 
1 12, 1 acknowledge the duty to disclose information which is known by me to be material to patentability as defined in Title 37, Code of Federal 
Regulations § 1 .56 which became available between the filing date of the prior application and the national or PCT International filing date 
of this application: 



APPLICATION SERIAL NO. 


FILING DATE 


STATUS: PATENTED, PENDING, 
ABANDONED 

































I hereby appoint as my attorneys, with full powers of substitution and revocation, to prosecute this application and transact all business in the 
Patent and Trademark Office connected therewith: Stephen A. Bent, Reg. No . 29.768 : David A. Blumenthal, Reg. No.. .26,257: William T. 
Ellis, Reg. No. 26.874 : John J. Feldhaus, Reg. No. ?.R,R?.?; Patricia D. Grariados, Reg. No. 33t6S^ John P. IsacsonTRegTlSro. -3^,215; 
Donald D. JefieryTR^. No. I£J8£); Eugene M. Lee, Reg. No. 32^13^ Richard Linn, Reg. Nq.25.144: Peter G. Mack, Reg. No. 26,001; 



; Harold C. Wegner, 



.eg. No. 2 g_.665; Charles F. Schiil, Reg. No. 27.590 : Richard L. Schwai^^g. No. 25,479; Arthur' Schwartz! 
Wegner, R^!~No. 25.258. ' 
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I hereby declare that all statements made herein of my own knowledge are true and that all statements made on information and belief are 
believed to be true; and further that these statements were made widi the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the United States Code and that such willful false statements 
may jeopardize the validity of the application or any patent issued thereon. 



Full Name ot h'irst or Sole Inventor 
Akira SUGIYAMA 


Signature of First or Sole Inventor 


Date 


Residence Address 
Kana^awa, Japan 


Country of Citizenship 
Japan 



Fujinokidaidanchi 27-102 1, sugesengoku 3-chome Tama-Ku, Kanagawa, 214 JAPAN 



